Forum Discussion

Erich_Macbeth_2's avatar
Erich_Macbeth_2
Icon for Nimbostratus rankNimbostratus
Aug 17, 2017

Modify iApp SSL profile

I need to modify the cipher list of all SSL profiles on a LTM but do not see any of the SSL profiles that are used within any of the iApps in the profile list when I issues the list profile command (tmsh list ltm profile client-ssl). Is it possible to modify the profiles through the CLI when 'strict updates' is enabled on the iApp?

 

application delivery
LTM

2 Replies

Sort By
  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Aug 17, 2017

    you should be able to edit any profiles that are not created by the iApp. which ones do you see with 

    tmsh list ltm profile client-ssl
    that you don't see in the GUI?

  • Erich_Macbeth_2's avatar
    Erich_Macbeth_2
    Icon for Nimbostratus rankNimbostratus
    Aug 17, 2017

    I was able to figure out how to modify the cipher list from the CLI using the following commands:

     

    tmsh modify sys application service iapp_name.app/iapp_name strict-updates disabled tmsh modify ltm profile client-ssl /Common/iapp_name.app/ssl_profile_name ciphers 'cipher_list' tmsh modify sys application service iapp_name.app/iapp_name strict-updates enabled

     

    I have not been able to figure out how to get it to default to the parent SSL profile.